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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 03/29/2005 
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From: Los Angeles 


CY-1 
Contact: 


Approved By: 


L INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE O4-20-20le BY 60322 UCLFSPLI/IN 


Drafted By: 


Case ID #: 288A-LA-241135 (Pending) 


Title: 


a] 


Details: On Saturday, 03/26/2005, the Churchof Scientology's 


Raa (Gk EC to open and assign case to. 


website, www.scientology.org, (192.216.201.9) came under a denial 
of service (DOS) attack. The attack started\at approximately 
12:15 p.m. and lasted for about six hours’ The target web server 


is connected to the Internet by a Til line. The T1 line also 
serves about nine other web servers, to include Dianetics.com. 
The Scientology online book store is also served off of the same 
Tl line. All 10 web servers were not accessible to the public 
Internet due to the flooding of the bandwidth of the T1 line. 


Level3 communications is their upstream Internet 
service provider. The tech support line of Level3 Communications 
stated that they had no logs of the DOS. Level3 trouble ticket 
number for the DOS complaint was 1239220. Only two ports were 
open on the servers, port 80 (HTTP), and port 443 (SSL). The 
attack seemed to be a SYN flood attack. Website administrators 
logged the attack and stated that they were in possession of logs 
for days prior to the attack 


The Scientology website is a Linux box located at 4 

fountas a Avenue, Toe Sage les, California. 700 cit a Lino vox locates at Th SS 

: b6 
The information in this EC was provided by f= — ee 


Security Manager for the Church of "S¢i 
Internet Security for the church, 4, 
oulevard, Hollywood, California 90025, telephone 


REGK=LA -2 YUE HTL 


kd 


To: Los Angeles 2. Los Angeles 
Re: 288A-LA-241135, 03/29/2005 


a es be reached on his mobile phone number 


stated that he would collect the logs from the a 
attack and from 3 days prior to the attack. | eeacea he would ~ 
also check received ils to determine if an extortion email was 
received. Finally, stated that he would collect loss 


figures caused by the DOS to provide to the FBI. 
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Drafted By: 
Case ID #: 288A-LA-241135 (Closed) - Qe 


Title: UNSUB(s); 
Church of Scientology - Victim; 
DDOS 
00: LA 


Synopsis: Close captioned case. 


Details: Captioned case involved a reported denial of service 
(DOS) attack against the Church:‘of Scientology's website, 
www.scientology.org, that occurred in approximately March 2005. 


Website administrators for the Church of Scientology 
were unable to provide pertinent and discernable server log 
information that would allow forthe identification of the 
attacker(s). In addition, loss figures resulting from the DOS 
attack were not provided by the victim company. Due to the 
above, the FBI is closing this case. 


There are no leads, evidentiary items, judicial 
proceedings, or other items outstanding on this case. 


Case closed in Los Angeles. 
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